<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v = "urn:schemas-microsoft-com:vml" xmlns:o = "urn:schemas-microsoft-com:office:office" xmlns:w = "urn:schemas-microsoft-com:office:word"><HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII"> <META content="MSHTML 6.00.2800.1555" name=GENERATOR> <STYLE>@font-face { font-family: Tahoma; } @page Section1 {size: 595.3pt 841.9pt; margin: 72.0pt 90.0pt 72.0pt 90.0pt; } P.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman" } LI.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman" } DIV.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0cm 0cm 0pt; FONT-FAMILY: "Times New Roman" } A:link { COLOR: blue; TEXT-DECORATION: underline } SPAN.MsoHyperlink { COLOR: blue; TEXT-DECORATION: underline } A:visited { COLOR: blue; TEXT-DECORATION: underline } SPAN.MsoHyperlinkFollowed { COLOR: blue; TEXT-DECORATION: underline } P { FONT-SIZE: 12pt; MARGIN-LEFT: 0cm; MARGIN-RIGHT: 0cm; FONT-FAMILY: "Times New Roman"; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto } SPAN.EmailStyle20 { COLOR: navy; FONT-FAMILY: Arial; mso-style-type: personal-reply } DIV.Section1 { page: Section1 } </STYLE> </HEAD> <BODY lang=EN-GB vLink=blue link=blue> <DIV>actually you can use .htaccess or the httpd.conf file it doesn't matter. If you put in the httpd.conf you have to restart apache - not always convenient to </DIV> <DIV>do that. But using .htaccess means you don't have to do that and can simply add this file into the locations required with immediate effect. </DIV> <DIV> </DIV> <DIV>Also, htpasswd(2) does as you say come with apache but it has been known to be included with Nagios! </DIV> <DIV> </DIV> <DIV> </DIV> <BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px"> <DIV class=OutlookMessageHeader dir=ltr align=left>-----Original Message----- From: Martin J. Green [mailto:mgreen@altien.com] Sent: 01 August 2006 15:36 To: Deborah Martin; Justin Craig Cc: Hari Sekhon; nagios-users@lists.sourceforge.net Subject: RE: [Nagios-users] Externals Commands </DIV> <DIV class=Section1> The .htaccess is only required if you don’t have root access to the server & thus can’t add it to the main httpd.conf. If you have root access, its almost always better to add it there. In that case you would have no .htaccess file, it would all be in the server config.<o:p></o:p> <o:p> </o:p> M<o:p></o:p> <o:p> </o:p> <DIV> <DIV class=MsoNormal style="TEXT-ALIGN: center" align=center> <HR tabIndex=-1 align=center width="100%" SIZE=2> </DIV> From: Deborah Martin [mailto:Deborah.Martin@kognitio.com] Sent: 01 August 2006 15:32 To: 'Justin Craig' Cc: Hari Sekhon; Martin J. Green; nagios-users@lists.sourceforge.net Subject: RE: [Nagios-users] Externals Commands<o:p></o:p></DIV> <o:p> </o:p> <DIV> ok - somewhere in the nagios docs are the details with regard to setting up .htaccess but <o:p></o:p></DIV> <DIV> <o:p></o:p></DIV> <DIV> I think there is a utility in the nagios install directory under bin called htpasswd or htpasswd2 and you run this util to generate a htpasswd.users file where<o:p></o:p></DIV> <DIV> all the users that have web interface access are stored including nagiosadmin. I store mine in the etc install directory. <o:p></o:p></DIV> <DIV> <o:p></o:p></DIV> <DIV> Then in my .htaccess file i have the following <o:p></o:p></DIV> <DIV> <o:p></o:p></DIV> <DIV> AuthName "Nagios Access" AuthType Basic AuthUserFile /usr/local/nagios/etc/htpasswd.users require valid-user<o:p></o:p></DIV> <DIV> <o:p></o:p></DIV> <DIV> This file resides in the sbin directory (which is also cgi-bin). Note though - change the AuthUserFile path to wherever you are storing the htpasswd.users file. <o:p></o:p></DIV> <DIV> <o:p></o:p></DIV> <DIV> When i was getting the 'return from whence you came error', this was exactly my problem - i hadn't set up authorisation correctly and the above was how i fixed it. <o:p></o:p></DIV> <DIV> <o:p></o:p></DIV> <DIV> hope this helps. <o:p></o:p></DIV> <BLOCKQUOTE style="MARGIN-TOP: 5pt; MARGIN-BOTTOM: 5pt"> -----Original Message----- From: Justin Craig [mailto:jrcraig.email@gmail.com] Sent: 01 August 2006 15:07 To: Deborah Martin Cc: Hari Sekhon; Martin J. Green; nagios-users@lists.sourceforge.net Subject: Re: [Nagios-users] Externals Commands<o:p></o:p> <DIV> so obviously I RTFM or I wouldn't have got this far. One part that I did have questions of was the .htaccess creation, as the documentation I read only provided information for setting up users via htpasswd -c and changing your authorization functionality in the CGI's to 1. <o:p></o:p></DIV> <DIV> <o:p></o:p></DIV> <DIV> So I did a find / -name *.htaccess* and that file doesn't exist. Sounds like I need one?<o:p></o:p></DIV> <DIV> <o:p></o:p></DIV> <DIV> Sorry, there isn't anything in my /var/www/cgi-bin directory <o:p></o:p></DIV> <DIV> <o:p></o:p></DIV> <DIV> Is there something missed here? <o:p></o:p></DIV> <DIV> On 8/1/06, Deborah Martin <<A href="mailto:Deborah.Martin@kognitio.com">Deborah.Martin@kognitio.com</A>> wrote: <o:p></o:p> <DIV> <DIV> <DIV> can you forward the contents of the .htaccess file that resides in the cgi-bin directory ? and a listing of the rest of the directory including the permissions <o:p></o:p></DIV></DIV> <DIV> <BLOCKQUOTE style="MARGIN-TOP: 5pt; MARGIN-BOTTOM: 5pt"> -----Original Message----- From: Justin Craig [mailto:<A href="mailto:jrcraig.email@gmail.com" target=_blank> jrcraig.email@gmail.com</A>] Sent: 01 August 2006 14:46 To: Deborah Martin Cc: Hari Sekhon; Martin J. Green; <A href="mailto:nagios-users@lists.sourceforge.net" target=_blank>nagios-users@lists.sourceforge.net</A> Subject: Re: [Nagios-users] Externals Commands<o:p></o:p> <DIV> i'm logged in as nagiosadmin and i have that username in all my cgi's. I have the sameissue, can't schedule downtime or issue external commands with the same error. I'm running nagios 2.4 <o:p></o:p></DIV> <DIV> On 8/1/06, Deborah Martin <<A href="mailto:Deborah.Martin@kognitio.com" target=_blank>Deborah.Martin@kognitio.com </A>> wrote: <o:p></o:p> <DIV> <DIV text="#000000" bgcolor="#ffffff"> <DIV> look at your /usr/local/nagios/sbin directory and check a) file permissions are correct and also whether your .htaccess authrization file is present. <o:p></o:p></DIV> <DIV> This error is generally caused by not correctly using .htaccess and also not configuring apache properly - check your httpd.conf is correctly configured <o:p></o:p></DIV></DIV> <DIV> <DIV> <o:p></o:p></DIV> <BLOCKQUOTE style="MARGIN-TOP: 5pt; MARGIN-BOTTOM: 5pt"> -----Original Message----- From: Hari Sekhon [mailto:<A href="mailto:hpsekhon@googlemail.com" target=_blank> hpsekhon@googlemail.com</A>] Sent: 01 August 2006 14:14 To: Martin J. Green Cc: <A href="mailto:nagios-users@lists.sourceforge.net" target=_blank>nagios-users@lists.sourceforge.net</A> Subject: Re: [Nagios-users] Externals Commands<o:p></o:p> Martin J. Green wrote: <o:p></o:p> <DIV> I can't get external commands to work either (appears it can't write to the file for some reason), but its so low on my list of priorities I haven't gotten to it yet. <o:p></o:p> <DIV> <DIV class=MsoNormal style="TEXT-ALIGN: center" align=center> <HR align=center width="100%" SIZE=2> </DIV> From: <A href="mailto:nagios-users-bounces@lists.sourceforge.net" target=_blank>nagios-users-bounces@lists.sourceforge.net</A> [<A href="mailto:nagios-users-bounces@lists.sourceforge.net" target=_blank> mailto:nagios-users-bounces@lists.sourceforge.net</A>] On Behalf Of Hari Sekhon Sent: 01 August 2006 13:48 To: <A href="mailto:nagios-users@lists.sourceforge.net" target=_blank>nagios-users@lists.sourceforge.net</A> Subject: [Nagios-users] Externals Commands<o:p></o:p></DIV> I am having real difficulty getting external commands to work and don't full understand what's going wrong, despite having RTFMing several times. As an example, I log in to the web interface as nagiosadmin via basic apache auth successfully as usual. I go to "comments" in the left hand pane and enter one for a host but when I click submit, I get the error: <o:p></o:p> <DIV> "Sorry, but you are not authorized to commit the specified command.<o:p></o:p></DIV> <DIV> Read the section of the documentation that deals with authentication and authorization in the CGIs for more information. Return from whence you came" As far as I can tell, I have all the perms set right according to the docs: cgi.cfg use_authentication=1 authorized_for_system_information=nagiosadmin authorized_for_configuration_information=nagiosadmin authorized_for_system_commands=nagiosadmin authorized_for_all_services=nagiosadmin authorized_for_all_hosts=nagiosadmin authorized_for_all_service_commands=nagiosadmin authorized_for_all_host_commands=nagiosadmin nagios.cfg command_file=/var/nagios/rw/nagios.cmd check_external_commands=1 # NOTE: Setting this value to -1 causes Nagios to check the external # command file as often as possible. command_check_interval=-1 ll /var/nagios/ | grep rw/ drwxrws--- 2 nagios apache 4096 Aug 1 13:28 rw/ ll /var/nagios/rw/nagios.cmd prw-rw---- 1 nagios apache 0 Aug 1 13:28 /var/nagios/rw/nagios.cmd| The apache process is run by the apache user, a member of the apache group, so has full perms to the directory and the pipe file nagios.cmd. Nagios is run by nagios who is also a member of the apache group. This all looks as it should be according to the docs as far as I can see.<o:p></o:p></DIV> What am I missing? Hari<o:p></o:p></DIV> I think quite a lot of people have trouble with this but a lot give up or are satisfied that the main bit is working and don't bother with this... does anybody have this working and if so could you post your configs so I can see anything you have different to me? are external commands generally broken or is there something missing in the docs/our configs/our brains? I'm using Version 1.4.1 Hari<o:p></o:p></BLOCKQUOTE></DIV> <DIV> ************************************************************************ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. Any unauthorised distribution or copying is strictly prohibited. Whilst Kognitio Limited takes steps to prevent the transmission of viruses via e-mail, we can not guarantee that any email or attachment is free from computer viruses and you are strongly advised to undertake your own anti-virus precautions. Kognitio grants no warranties regarding performance, use or quality of any e-mail or attachment and undertakes no liability for loss or damage, howsoever caused. *********************************************************************** <o:p></o:p></DIV></DIV> ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash <A href="http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV" target=_blank>http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV</A> _______________________________________________ Nagios-users mailing list <A href="mailto:Nagios-users@lists.sourceforge.net" target=_blank>Nagios-users@lists.sourceforge.net</A> <A href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target=_blank>https://lists.sourceforge.net/lists/listinfo/nagios-users </A> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null<o:p></o:p></DIV> -- - Justin <o:p></o:p></BLOCKQUOTE></DIV></DIV></DIV> -- - Justin <o:p></o:p></BLOCKQUOTE></DIV></BLOCKQUOTE></BODY></HTML>